From 67d0c0cf03c3fdc83d90d422e40bd88a0d69eb29 Mon Sep 17 00:00:00 2001 From: Sebastian Reyes Espinosa Date: Tue, 29 Dec 2015 11:53:13 -0500 Subject: [PATCH] Deleting sudoer acces The odoo user is a system user, created even without shell access rights and no password, because his solely purpose is to run the whole odoo process and that's all. The odoo user should not have any access level to the system beyond the scope of his own software. Sudoers access should only be given to known system administrators. It adds an small overhead, but it's worth it as an small exchange from a good security policy point of view. --- odoo_install.sh | 2 -- 1 file changed, 2 deletions(-) diff --git a/odoo_install.sh b/odoo_install.sh index 504366d..ac569dc 100644 --- a/odoo_install.sh +++ b/odoo_install.sh @@ -93,8 +93,6 @@ fi echo -e "\n---- Create ODOO system user ----" sudo adduser --system --quiet --shell=/bin/bash --home=$OE_HOME --gecos 'ODOO' --group $OE_USER -#The user should also be added to the sudo'ers group. -sudo adduser $OE_USER sudo echo -e "\n---- Create Log directory ----" sudo mkdir /var/log/$OE_USER